IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access. IBM X-Force ID: 266807.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade librados2Upgrade ceph-commonUpgrade librbd1-develUpgrade python-rbdUpgrade librbd1Upgrade librados2-develUpgrade ceph-common-debuginfoUpgrade python-rados | Oct 23, 2023 | Oct 23, 2023 |
| Centos_linux | — | Upgrade python3-rados-debuginfoUpgrade rbd-fuse-debuginfoUpgrade ceph-debuginfoUpgrade libcephfs2-debuginfoUpgrade ceph-commonUpgrade rbd-nbd-debuginfoUpgrade librgw-develUpgrade python3-rbd-debuginfoUpgrade ceph-immutable-object-cacheUpgrade libcephfs2Upgrade python3-radosUpgrade ceph-fuse-debuginfoUpgrade libcephfs-develUpgrade librados-devel-debuginfoUpgrade libcephsqlite-debuginfoUpgrade librados-develUpgrade python3-ceph-commonUpgrade ceph-immutable-object-cache-debuginfoUpgrade librgw2-debuginfoUpgrade ceph-selinuxUpgrade ceph-base-debuginfoUpgrade cephadm-ansibleUpgrade rbd-nbdUpgrade ceph-resource-agentsUpgrade ceph-common-debuginfoUpgrade libradosstriper1Upgrade ceph-test-debuginfoUpgrade rbd-mirror-debuginfoUpgrade librbd-develUpgrade ceph-mgr-debuginfoUpgrade python3-rbdUpgrade ceph-osd-debuginfoUpgrade ceph-mon-debuginfoUpgrade ceph-debugsourceUpgrade libradospp-develUpgrade python3-rgw-debuginfoUpgrade python3-cephfsUpgrade ceph-mibUpgrade ceph-mds-debuginfoUpgrade ceph-baseUpgrade ceph-fuseUpgrade cephadmUpgrade librgw2Upgrade python3-ceph-argparseUpgrade libradosstriper1-debuginfoUpgrade cephfs-mirror-debuginfoUpgrade ceph-radosgw-debuginfoUpgrade ceph-exporter-debuginfoUpgrade python3-rgwUpgrade python3-cephfs-debuginfoUpgrade cephfs-top | Nov 1, 2023 | Oct 12, 2023 |
| Debian | — | Upgrade ceph | Oct 25, 2023 | Oct 25, 2023 |
| Redhat_linux | — | Upgrade librgw-develUpgrade libcephfs-develUpgrade rbd-nbdUpgrade ceph-debuginfoUpgrade ceph-debugsourceUpgrade ceph-baseUpgrade ceph-selinuxUpgrade python3-radosUpgrade python3-rados-debuginfoUpgrade ceph-fuse-debuginfoUpgrade ceph-resource-agentsUpgrade rbd-nbd-debuginfoUpgrade python3-rgw-debuginfoUpgrade libradospp-develUpgrade python3-rgwUpgrade libradosstriper1-debuginfoUpgrade ceph-commonUpgrade ceph-mibUpgrade python3-rbdUpgrade libcephsqlite-debuginfoUpgrade librgw2-debuginfoUpgrade python3-ceph-argparseUpgrade librgw2Upgrade librados-develUpgrade libcephfs2Upgrade python3-cephfsUpgrade ceph-exporter-debuginfoUpgrade rbd-fuse-debuginfoUpgrade cephadmUpgrade libradosstriper1Upgrade ceph-radosgw-debuginfoUpgrade ceph-test-debuginfoUpgrade cephfs-topUpgrade ceph-immutable-object-cache-debuginfoUpgrade libcephfs2-debuginfoUpgrade ceph-mgr-debuginfoUpgrade cephfs-mirror-debuginfoUpgrade ceph-common-debuginfoUpgrade rbd-mirror-debuginfoUpgrade python3-cephfs-debuginfoUpgrade python3-ceph-commonUpgrade cephadm-ansibleUpgrade python3-rbd-debuginfoUpgrade librados-devel-debuginfoUpgrade ceph-immutable-object-cacheUpgrade ceph-osd-debuginfoUpgrade ceph-mon-debuginfoUpgrade ceph-fuseUpgrade ceph-base-debuginfoUpgrade ceph-mds-debuginfoUpgrade librbd-devel | Nov 1, 2023 | Oct 12, 2023 |
| Ubuntu | — | Upgrade ceph (Ubuntu Pro)Upgrade ceph-common (Ubuntu Pro)Upgrade ceph-commonUpgrade ceph-base (Ubuntu Pro)Upgrade cephUpgrade ceph-base | Jan 30, 2024 | Jan 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub